Application Security Engineer: CI/CD & Threat Modeling Pro

Staffing Spot, Inc.; Des Moines (IA); On-site; USD 110,000 - 170,000; Full time

Job summary

Staffing Spot, Inc. is seeking an experienced Application Security Engineer in Des Moines, IA to perform security assessments, code reviews, and vulnerability remediation across web, mobile, and API systems. You will implement SAST/DAST/IA tools and integrate security into CI/CD pipelines.

The role requires experience with OWASP Top 10, secure SDLC, and collaboration with development teams to remediate critical vulnerabilities and enforce secure coding standards.

Qualifications

• Strong understanding of web application security and API security.
• Experience with secure SDLC and DevSecOps practices.
• Familiarity with OWASP Top 10 and testing methodologies.
• Experience with vulnerability management tools and remediation.

Responsibilities

• Conduct application security assessments, vulnerability assessments, and penetration testing of web applications, mobile applications, and APIs.
• Perform secure code reviews to identify security flaws and recommend remediation strategies.
• Identify and remediate vulnerabilities aligned with the OWASP Top 10 and OWASP API Security Top 10.
• Implement and manage security testing tools, including SAST, DAST, SCA, and secrets scanning.
• Integrate application security tools into CI/CD pipelines and DevSecOps workflows.
• Perform threat modeling and security architecture reviews for new and existing applications.
• Analyze vulnerability scan results, validate findings, eliminate false positives, and prioritize remediation based on risk.
• Collaborate with developers to resolve vulnerabilities such as SQL injection, cross-site scripting (XSS), broken access control, SSRF, and authentication flaws.
• Assess third-party libraries and open-source dependencies for known vulnerabilities.
• Establish and maintain secure coding standards and application security policies.
• Track vulnerabilities and remediation activities using security dashboards and ticketing systems.
• Support compliance initiatives and security standards such as ISO 27001, NIST, and PCI DSS, where applicable.
• Conduct security awareness sessions and provide secure coding guidance to development teams.

Skills

Web security

API security

Threat modeling

Secure coding guidance

Tools

Burp Suite

OWASP ZAP

SonarQube

Checkmarx

Veracode

Snyk

Job description

Staffing Spot, Inc. is seeking an experienced Application Security Engineer in Des Moines, IA to perform security assessments, code reviews, and vulnerability remediation across web, mobile, and API systems. You will implement SAST/DAST/IA tools and integrate security into CI/CD pipelines.

The role requires experience with OWASP Top 10, secure SDLC, and collaboration with development teams to remediate critical vulnerabilities and enforce secure coding standards.